[SECURITY] Fedora 12 Update: glpi-0.72.4-3.svn11497.fc12

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Bugzilla < 3.2.9 / 3.4.9 / 3.6.3 Multiple Vulnerabilities

Binary data 5700.prm...

Trojan Exploiting Adobe Flash Bug Has Some Odd Traits

The piece of malware that’s being used to exploit the unpatched Adobe Flash bug that was disclosed Thursday looks like sort of a run-of-the-mill Trojan, but an analysis shows that it does have some unique features. The Trojan is known by a couple of names, including Sykipot, and its infection...

Firefox race condition flaw (MFSA 2010-73)

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the...

[SECURITY] Fedora 13 Update: cvs-1.11.23-10.fc13

CVS Concurrent Versions System is a version control system that can record the history of your files usually, but not always, source code. CVS only stores the differences between versions, instead of every version of every file you have ever created. CVS also keeps a log of who, when, and why...

VulnCheck KEV: CVE-2010-3765

Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation...

CVE-2010-3714

The jumpUrl aka access tracking implementation in tslib/class.tslibfe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified...

Design/Logic Flaw

The jumpUrl aka access tracking implementation in tslib/class.tslibfe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified...

CVE-2010-3714

The jumpUrl aka access tracking implementation in tslib/class.tslibfe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified...

CVE-2010-3714

TYPO3 SA/remote file disclosure due to a non-typesafe jumpUrl hash comparison in tslib/class.tslib_fe.php affects TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4. An attacker can exploit this to read arbitrary files via unspecified vectors. The issue is documented as CVE-201...

Researchers Find Methods to Kill Persistent 'Evercookie'

The persistent method that security researcher Samy Kamkar introduced last week for storing tracking data on a user’s machine, known as the “Evercookie,” is even more worrisome when used on mobile devices, according to another researcher’s analysis. The Evercookie is a simple method for forcing a...

CVE-2000-0248

creationtimestamp| type| source ---|---|--- 2010-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16858 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/piranhapasswdexec.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2010-3552

creationtimestamp| type| source ---|---|--- 2010-10-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15241 2011-01-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16587 2018-05-29 15:50:33+00:00| seen|...

Multiple vulnerabilities in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Remote File Disclosure, Cross-Site Scripting XSS, Privilege Escalation and Denial of Service. Component Type: TYPO3 Core Affected Versions: 4.2.14 and below, 4.3.6 and below, 4.4.3 and below Vulnerability Types: Remote File Disclosure,...

Ad Groups Try to Make Opting Out of Tracking Ads Easier

In the latest attempt to allay consumers’ rising fears about the massive amounts of data that online advertisers collect about them, an amalgamation of industry groups is planning to launch a new self-regulation effort meant to let users decide not to be tracked by advertisers. The program will...

Fedora Update for roundup FEDORA-2010-12261

Check for the Version of roundup OpenVAS Vulnerability Test Fedora Update for roundup FEDORA-2010-12261 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for roundup FEDORA-2010-12269

Check for the Version of roundup OpenVAS Vulnerability Test Fedora Update for roundup FEDORA-2010-12269 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2007-4776

creationtimestamp| type| source ---|---|--- 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16680 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/msvisualbasicvbp.rb 2025-02-06 03:13:38+00:00...

[SECURITY] Fedora 14 Update: roundup-1.4.15-1.fc14

Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...

[SECURITY] Fedora 13 Update: roundup-1.4.15-1.fc13

Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...